Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-26203 EUVD-2023-30028GHSA-4pj9-45vq-jvvh

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.…

Published May 3, 2023 · Updated Oct 23, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiNAC Category: Network devices

Description

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

Affected products

VendorProductAffectedFixed
Fortinet FortiNAC 9.4.0 – ≤ 9.4.1, 9.2.0 – ≤ 9.2.7, 9.1.0 – ≤ 9.1.9, 8.8.0 – ≤ 8.8.11, 8.7.0 – ≤ 8.7.6, 7.2.0 —

References